$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/nouc3M5_1m0s4co7bIWopxlFDgo.roa File: nouc3M5_1m0s4co7bIWopxlFDgo.roa (raw, json) Hash identifier: 0q51BrAz9aflZTbzWZ0esWnQO7daIm0GOby7JKfmQFQ= Subject key identifier: 9E:8B:9C:DC:CE:7F:D6:6D:2C:E1:CA:3B:6C:85:A8:A7:19:45:0E:0A Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 12F5 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/nouc3M5_1m0s4co7bIWopxlFDgo.roa Signing time: Fri 01 Sep 2023 09:24:18 +0000 ROA not before: Fri 01 Sep 2023 09:24:18 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 42.0.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4853 (0x12f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:18 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9E8B9CDCCE7FD66D2CE1CA3B6C85A8A719450E0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f2:7a:0e:21:8c:86:9a:b0:df:6f:60:2f:35: 8b:ca:cf:c2:22:71:fe:d8:11:e1:bf:89:f4:d3:71: aa:10:e2:00:0b:f7:52:67:ea:7d:8e:8e:75:a6:5f: 3b:ec:fb:a7:05:09:6e:cf:fb:fd:af:41:a5:c4:3b: 01:7b:4d:d9:7f:33:fa:ee:ea:47:60:8e:71:fd:97: f4:39:15:e5:53:dc:a9:82:e0:79:dc:79:f0:a8:d4: e4:2b:da:c8:c1:12:d5:10:a6:52:8a:ab:bb:85:df: a9:83:3f:ea:e2:c8:c9:19:96:9f:d8:82:f6:7c:a3: 82:0c:59:8c:a3:5b:13:e7:c8:02:6f:68:7c:0e:68: 71:15:00:93:d6:19:7b:04:05:be:6a:5e:d7:e6:36: 39:08:ef:5a:96:05:61:ea:9f:87:61:e1:10:51:fa: be:39:88:b3:7e:87:20:ce:76:7f:4b:c3:b2:d3:79: 5c:17:52:09:9e:81:ee:31:b7:f5:dd:72:0d:88:54: 3a:5f:ca:8f:90:9c:07:a9:b7:cc:3d:13:38:65:77: 2d:a3:47:7e:f8:de:74:7a:4c:3e:29:67:f9:bc:75: 86:0a:bc:df:d9:36:90:ac:7c:81:55:52:ec:1e:06: 68:99:3e:ac:af:ef:ab:8c:a7:d4:5e:85:25:57:30: 9b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8B:9C:DC:CE:7F:D6:6D:2C:E1:CA:3B:6C:85:A8:A7:19:45:0E:0A X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/nouc3M5_1m0s4co7bIWopxlFDgo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.0.64.0/18 Signature Algorithm: sha256WithRSAEncryption 6a:ee:96:7b:4c:45:cb:37:a9:c2:b0:58:22:ac:f6:ab:c6:d7: 75:35:8d:c1:c1:b5:cd:f8:f6:eb:2d:d4:16:9c:3c:82:bd:bc: d3:81:e7:36:46:36:13:5c:be:36:e2:f3:04:4f:b4:8f:87:2e: 50:66:76:57:4f:c2:2a:5b:7b:01:75:4d:8d:2d:be:fb:73:43: bd:14:34:b6:2a:b8:cd:ab:78:40:f4:b5:44:8a:79:06:cd:6f: ec:34:f4:7a:ac:d3:67:de:96:bd:56:61:9b:bc:55:fd:60:91: 1d:7d:fe:63:84:bc:3b:df:97:6b:d2:57:b0:40:28:13:33:48: 4f:6d:17:d6:55:ae:a9:25:2a:60:da:b3:6f:c2:94:28:05:95: c0:c8:3d:f7:e3:ec:1d:7c:99:84:6a:23:fb:3e:e0:30:ee:c0: 36:f4:ca:a6:a9:7d:04:2e:91:21:f4:e9:9e:f6:83:01:d8:f9: 9c:6a:e0:98:f2:41:d8:37:d7:29:d8:33:4d:67:17:e3:59:b1: 58:27:d0:eb:80:1d:91:2e:05:0d:65:14:46:30:20:52:c9:0b: 3a:16:a5:e1:5c:07:21:d6:d1:77:13:dd:af:25:41:99:96:97: 22:87:76:a1:a4:69:03:f8:6f:62:a0:07:8b:6d:23:42:76:b7: d3:59:5d:6d -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEvUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlFOEI5Q0RDQ0U3RkQ2 NkQyQ0UxQ0EzQjZDODVBOEE3MTk0NTBFMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCb8noOIYyGmrDfb2AvNYvKz8Iicf7YEeG/ifTTcaoQ4gAL91Jn 6n2OjnWmXzvs+6cFCW7P+/2vQaXEOwF7Tdl/M/ru6kdgjnH9l/Q5FeVT3KmC4Hnc efCo1OQr2sjBEtUQplKKq7uF36mDP+riyMkZlp/YgvZ8o4IMWYyjWxPnyAJvaHwO aHEVAJPWGXsEBb5qXtfmNjkI71qWBWHqn4dh4RBR+r45iLN+hyDOdn9Lw7LTeVwX Ugmege4xt/Xdcg2IVDpfyo+QnAept8w9Ezhldy2jR3743nR6TD4pZ/m8dYYKvN/Z NpCsfIFVUuweBmiZPqyv76uMp9RehSVXMJstAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUnouc3M5/1m0s4co7bIWopxlFDgowHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbm91YzNNNV8xbTBzNGNvN2JJV29w eGxGRGdvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBioAQDAN BgkqhkiG9w0BAQsFAAOCAQEAau6We0xFyzepwrBYIqz2q8bXdTWNwcG1zfj26y3U Fpw8gr2804HnNkY2E1y+NuLzBE+0j4cuUGZ2V0/CKlt7AXVNjS2++3NDvRQ0tiq4 zat4QPS1RIp5Bs1v7DT0eqzTZ96WvVZhm7xV/WCRHX3+Y4S8O9+Xa9JXsEAoEzNI T20X1lWuqSUqYNqzb8KUKAWVwMg99+PsHXyZhGoj+z7gMO7ANvTKpql9BC6RIfTp nvaDAdj5nGrgmPJB2DfXKdgzTWcX41mxWCfQ64AdkS4FDWUURjAgUskLOhal4VwH IdbRdxPdryVBmZaXIod2oaRpA/hvYqAHi20jQna301ldbQ== -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org